Обсуждение: ERROR: language "c" is not trusted
I do the following as the user "postgres" alberts=# CREATE FUNCTION foobar(CSTRING) alberts-# RETURNS opaque alberts-# AS '$libdir/mystuff' , 'foobar' alberts-# LANGUAGE 'c' alberts-# WITH (isstrict,iscachable); CREATE FUNCTION Next I'd like to be able to use the funtion as a "normal" user so I thy this: grant USAGE ON LANGUAGE c TO alberts; ERROR: language "c" is not trusted OK, now what? ===== Chris Albertson Home: 310-376-1029 chrisalbertson90278@yahoo.com Cell: 310-990-7550 Office: 310-336-5189 Christopher.J.Albertson@aero.org KG6OMK __________________________________ Do you Yahoo!? SBC Yahoo! DSL - Now only $29.95 per month! http://sbc.yahoo.com
http://www.faqs.org/docs/ppbook/r24435.htm > -----Original Message----- > From: Chris Albertson [mailto:chrisalbertson90278@yahoo.com] > Sent: Tuesday, July 01, 2003 4:45 PM > To: pgsql-general@postgresql.org > Subject: [GENERAL] ERROR: language "c" is not trusted > > > I do the following as the user "postgres" > > alberts=# CREATE FUNCTION foobar(CSTRING) > alberts-# RETURNS opaque > alberts-# AS '$libdir/mystuff' , 'foobar' > alberts-# LANGUAGE 'c' > alberts-# WITH (isstrict,iscachable); > CREATE FUNCTION > > Next I'd like to be able to use the funtion as a "normal" > user so I thy this: > > grant USAGE ON LANGUAGE c TO alberts; > ERROR: language "c" is not trusted > > OK, now what? > > > > > > ===== > Chris Albertson > Home: 310-376-1029 chrisalbertson90278@yahoo.com > Cell: 310-990-7550 > Office: 310-336-5189 Christopher.J.Albertson@aero.org > KG6OMK > > __________________________________ > Do you Yahoo!? > SBC Yahoo! DSL - Now only $29.95 per month! http://sbc.yahoo.com > > ---------------------------(end of > broadcast)--------------------------- > TIP 9: the planner will ignore your desire to choose an index > scan if your > joining column's datatypes do not match >
Thanks for the hint. This fixed it:
alberts=# UPDATE pg_language
SET lanpltrusted = true
WHERE lanname = 'c';
UPDATE 1
alberts=# grant USAGE ON LANGUAGE c TO alberts;
GRANT
--- Dann Corbit <DCorbit@connx.com> wrote:
> http://www.faqs.org/docs/ppbook/r24435.htm
>
> > -----Original Message-----
> > From: Chris Albertson [mailto:chrisalbertson90278@yahoo.com]
> > Sent: Tuesday, July 01, 2003 4:45 PM
> > To: pgsql-general@postgresql.org
> > Subject: [GENERAL] ERROR: language "c" is not trusted
> >
> >
> > I do the following as the user "postgres"
> >
> > alberts=# CREATE FUNCTION foobar(CSTRING)
> > alberts-# RETURNS opaque
> > alberts-# AS '$libdir/mystuff' , 'foobar'
> > alberts-# LANGUAGE 'c'
> > alberts-# WITH (isstrict,iscachable);
> > CREATE FUNCTION
> >
> > Next I'd like to be able to use the funtion as a "normal"
> > user so I thy this:
> >
> > grant USAGE ON LANGUAGE c TO alberts;
> > ERROR: language "c" is not trusted
> >
> > OK, now what?
=====
Chris Albertson
Home: 310-376-1029 chrisalbertson90278@yahoo.com
Cell: 310-990-7550
Office: 310-336-5189 Christopher.J.Albertson@aero.org
KG6OMK
__________________________________
Do you Yahoo!?
SBC Yahoo! DSL - Now only $29.95 per month!
http://sbc.yahoo.com
Chris Albertson wrote:
> Thanks for the hint. This fixed it:
>
> alberts=# UPDATE pg_language
> SET lanpltrusted = true
> WHERE lanname = 'c';
> UPDATE 1
>
> alberts=# grant USAGE ON LANGUAGE c TO alberts;
> GRANT
>
Ummm, I doubt that's really what you wanted, was it? Quoting the fine
manual, with emphasis added:
USAGE
For procedural languages, allows the use of the specified language
for the creation of functions in that language. This is the only type of
^^^^^^^^^^^^^^^^^^^^^^^^^
privilege that is applicable to procedural languages.
EXECUTE
Allows the use of the specified function and the use of any
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
operators that are implemented on top of the function. This is the only
type of privilege that is applicable to functions. (This syntax works
for aggregate functions, as well.)
Did you just want to allow non-superusers to execute C language
functions, or create their own? The latter is a huge, gaping security
hole, which is why the language is marked "untrusted".
Joe